This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting www.falfish.com you are accepting and consenting to the practices described in this policy.
We will only collect and use your information where we have lawful grounds and legitimate business reasons to do so
We will be transparent in our dealings with you and will tell you about how we will collect and use your information
If we have collected your information for a particular purpose we will not use it for anything else unless you have been informed and, where relevant, your permission obtained
We will not ask for more information than we need for the purposes for which we are collecting it
We will update our records when you inform us that your details have changed
We will continue to review and assess the quality of our information
We will implement and adhere to information retention policies relating to your information and will ensure that your information is securely disposed of at the end of the appropriate retention period
We will observe the rights granted to you under applicable privacy and data protection laws and will ensure that queries relating to privacy issues are promptly and transparently dealt with
We will train our staff on their privacy obligations
We will ensure we have appropriate physical and technological security measures to protect your information regardless of where it is held
We will ensure that when we outsource any processes we ensure the supplier has appropriate security measures in place and will contractually require them to comply with these Privacy Principles
We will ensure that suitable safeguards are in place before personal information is transferred to other countries
DATA WE COLLECT ABOUT YOU
We may collect certain information or data about you when you contact us or use www.falfish.com, such as.
Questions, queries or feedback you leave, including your email address if you contact Falfish Ltd.
Your IP address, and details of which version of web browser you used
Information on how you use the site, using cookies and page tagging techniques
We may also collect personal data from you by communications, including email, telephone, post or social media, by networking and by engagement of services/provision of goods. This may include your (or your employer’s or our customers’) name, address, email address, date of birth, family relationships, bank account and payroll information.
We may also require documentary details from you such as driving licence, passport or birth certificate, in order to comply with our obligations under identification, money laundering and anti-terrorism legislation.
This data can be viewed by authorised people within Falfish Ltd to:
Improve the website by monitoring how you use it
Gather feedback to improve our services
Respond to any feedback you send us, if you’ve asked us to
Provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes or by Legitimate Interests
Notify you about changes to our business, goods or services
Use in the investigation and/or defence of potential complaints, disciplinary proceedings and legal proceedings
Enable us to invoice you for goods and services
We may also process your personal data without your knowledge or consent, in accordance with this notice, where we are legally required or permitted to do so.
THE LEGAL BASIS USED FOR PROCESSING YOUR DATA
The law says that we must have one or more of the following reasons for using your data:
To fulfil a contract we have with you to provide our services
Where it is our legal duty
When it is in our legitimate interest
When you consent to the use of the data
A legitimate interest is when we have a business or commercial reason to use your information. Even then, it must not unfairly go against what is right and best for you.
The legitimate interests that we will rely upon to process this information are:
To administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
To improve our site to ensure that content is presented in the most effective manner for you and for your computer;
To allow you to participate in interactive features of our service, when you choose to do so;
As part of our efforts to keep our site safe and secure;
To make suggestions and recommendations to you and other users of our site about goods or services that may interest you or them;
To maintain contact with you when you are an existing client outside of our contractual obligations.
WHERE YOUR DATA IS STORED
We store your data on secure servers in the European Economic Area (EEA).
By submitting your personal data, you agree to this.
HOW LONG DO WE RETAIN YOUR DATA
We will only retain your personal data for as long is necessary to fulfil the purposes for which it is collected.
When assessing what retention period is appropriate for your personal data, we take into consideration:
The requirements of our business and the services provided;
Any statutory or legal obligations;
The purposes for which we originally collected the personal data;
The lawful grounds on which we based our processing;
The types of personal data we have collected;
The amount and categories of your personal data; and
Whether the purpose of the processing could reasonably be fulfilled by other means.
KEEPING YOUR DATA SECURE
Sending information over the internet is generally not completely secure, and we can’t guarantee the security of your data while it’s in transit. Any data you send is at your own risk.
We have robust procedures and security features compliant with the GDPR in place to keep your data secure once we receive it. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
DISCLOSING YOUR INFORMATION
We won’t share your information with any other organisations for marketing, market research or commercial purposes, and we don’t pass on your details to other websites.
You can find out what information we hold about you and ask us not to use any of the information we collect.
A Subject Access Request under the GDPR is your right to request a copy of the information that we hold about you. Such requests must be in writing to the contact details provided in this policy. If we do hold any of your personal data we will respond in writing within one calendar month of your request (where that request was submitted in accordance with this policy).
The information we supply will:
Confirm that your data is being processed;
Verify the lawfulness and the purpose of the processing;
Confirm the categories of personal data being processed;
Confirm the type of recipient to whom the personal data have been or will be disclosed; and
Let you have a copy of the data in an intelligible form.
Please note that you may need to provide identification in order to prove who you are to access your data.
In the instance that we do not hold personal information about you we will also confirm this in writing within one calendar month.
LINKS TO OTHER WEBSITES
www.falfish.com contains links to other websites.
Following a link to another website:
Following a link to www.falfish.com from another website:
CONCERNS OR COMPLAINTS
If you have any complaints in relation to how our business has processed your data or in relation to the exercise of your rights as detailed above you can, in the first instance, raise your concerns by contacting us at the following address: Falfish Ltd, 15 Cardrew Industrial Estate, Redruth, Cornwall, TR15 1SS.
You may also contact the Information Commissioner’s Office in relation to any such complaints. https://ico.org.uk/concerns